Where is the list of 'run' files stored

Discussion in 'Computer Support' started by Kimball K Kinnison, Jun 23, 2004.

  1. Windows XP Pro

    If you click on start and run and start typing a command in previous command
    you have typed appear in a drop down box. Where is this list of files
    stored?
     
    Kimball K Kinnison, Jun 23, 2004
    #1
    1. Advertisements

  2. Kimball K Kinnison

    Boomer Guest

    Hi

    Is this what you are looking for?

    Command shell overview
    http://www.microsoft.com/resources/documentation/windows/xp/all/prodd
    ocs/en-us/ntcmds_shelloverview.mspx

    Command-line reference A-Z
    http://www.microsoft.com/resources/documentation/windows/xp/all/prodd
    ocs/en-us/ntcmds.mspx

    Hope this helps.
     
    Boomer, Jun 23, 2004
    #2
    1. Advertisements

  3. Thanx for you help but that is not quite what I am after.

    As I said before when I click start and run and then start to type a list of
    previously typed commands appear in a drop down box. I want to know where
    this list is stored so I may clear it.

    Again many thanx.
     
    Kimball K Kinnison, Jun 23, 2004
    #3
  4. Kimball K Kinnison

    why? Guest

    My XP box is off just now, however typing in (Win 2000) a seldom used
    command then using regedit to search for it (even faster than trying
    Google) this turned up

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU
    List of commands you mean?

    Me
     
    why?, Jun 23, 2004
    #4
  5. Kimball K Kinnison

    Boomer Guest


    Any help here?

    http://www.google.com/search?num=100&hl=en&lr=lang_en&ie=UTF-
    8&safe=off&c2coff=1&q=clear+run+menu&btnG=Search

    Your shorter link is: http://makeashorterlink.com/?C5B1512A8
     
    Boomer, Jun 23, 2004
    #5
  6. Many thanx to you both
     
    Kimball K Kinnison, Jun 23, 2004
    #6
  7. Kimball K Kinnison

    °Mike° Guest

    Clear your history from Internet Options.


     
    °Mike°, Jun 23, 2004
    #7
  8. Thanx Mike - I have tried all of the above. However one entry refuses to be
    cleared from the run list. I have cleared the registry, cleared my Internet
    History and used tweak tools and this one entry, a website url, refuses to
    be cleared.

    I have run Norton, AdAware, Spybot and Spyblaster but they all find nothing.
    Here is my Hijack This Log. I would be very grateful if you could take a
    look to see if there is anything amiss.

    Logfile of HijackThis v1.97.7
    Scan saved at 6:40:32 PM, on 23/6/04
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\TDK Systems\Bluetooth Software\bin\btwdins.exe
    C:\Program Files\sony\giga pocket\shwserv.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\Program Files\sony\giga pocket\RM_SV.exe
    C:\Program Files\Norton AntiVirus\SAVScan.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\ezSP_Px.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\WINDOWS\System32\ICO.EXE
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
    C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\TDK Systems\Bluetooth Software\BTTray.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\sony\usbsircs\usbsircs.exe
    C:\Program Files\sony\giga pocket\ReserveModule.exe
    C:\Program Files\Sony\VAIO Action Setup\VAServ.exe
    C:\Program Files\Sony\Wireless Panel\WPanel.exe
    C:\PROGRA~1\TDKSYS~1\BLUETO~1\BTSTAC~1.EXE
    C:\Program Files\sony\giga pocket\gps.exe
    C:\WINDOWS\System32\HPZipm12.exe
    C:\WINDOWS\System32\ctfmon.exe
    Z:\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
    http://portal.plus.net/index_nlp.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext =
    http://www.plus.net/
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program
    Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} -
    C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
    O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program
    files\google\googletoolbar2.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program
    Files\Norton AntiVirus\NavShExt.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} -
    C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program
    files\google\googletoolbar2.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
    C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program
    Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec
    Shared\ccApp.exe"
    O4 - HKLM\..\Run: [Advanced Tools Check]
    C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
    O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software
    Update\HPWuSchd2.exe"
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility]
    C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
    O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control
    Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
    Files\Java\j2re1.4.2_04\bin\jusched.exe
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft
    ActiveSync\WCESCOMM.EXE"
    O4 - HKCU\..\Run: [Symantec NetDriver Monitor]
    C:\PROGRA~1\Symantec\LIVEUP~1\SNDMon.EXE
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search &
    Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - Global Startup: BTTray.lnk = ?
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program
    Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
    Office\Office10\OSA.EXE
    O4 - Global Startup: Remocon Driver.lnk = ?
    O4 - Global Startup: Timer Recording Manager.lnk = C:\Program
    Files\sony\giga pocket\ReserveModule.exe
    O4 - Global Startup: VAIO Action Setup (Server).lnk = ?
    O4 - Global Startup: Wireless Panel.lnk = ?
    O8 - Extra context menu item: &Google Search - res://c:\program
    files\google\GoogleToolbar2.dll/cmsearch.html
    O8 - Extra context menu item: Backward &Links - res://c:\program
    files\google\GoogleToolbar2.dll/cmbacklinks.html
    O8 - Extra context menu item: Cac&hed Snapshot of Page - res://c:\program
    files\google\GoogleToolbar2.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel -
    res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
    O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\TDK
    Systems\Bluetooth Software\btsendto_ie_ctx.htm
    O8 - Extra context menu item: Si&milar Pages - res://c:\program
    files\google\GoogleToolbar2.dll/cmsimilar.html
    O8 - Extra context menu item: Translate into English - res://c:\program
    files\google\GoogleToolbar2.dll/cmtrans.html
    O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
    O9 - Extra button: Create Mobile Favorite (HKLM)
    O9 - Extra 'Tools' menuitem: Create Mobile Favorite... (HKLM)
    O9 - Extra button: @btrez.dll,-4015 (HKLM)
    O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 (HKLM)
    O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) -
    https://components.viewpoint.com/MT...known&unknown&unknown&unknown&unknown&unknown
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX
    Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -
    http://housecall.trendmicro-europe.com/housecall/Xscan53.cab
    O16 - DPF: {7823A620-9DD9-11CF-A662-00AA00C066D2} (PopupMenu Object) -
    http://activex.microsoft.com/controls/iexplorer/x86/iemenu.cab
    O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) -
    http://195.166.137.244/activex/AxisCamControl.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) -
    http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38094.5885185185
    O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) -
    https://www-secure.symantec.com/techsupp/activedata/SymAData.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
    http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) -
    https://www-secure.symantec.com/techsupp/activedata/ActiveData.cab
     
    Kimball K Kinnison, Jun 23, 2004
    #8
  9. Kimball K Kinnison

    °Mike° Guest

    On Wed, 23 Jun 2004 18:46:12 +0100, in
    <40d9c1e1$0$8252$>
    Kimball K Kinnison scrawled:

    The website url may have been important. What was/is it?
    Unless PlusNet is you preferred home page, have HijackThis fix
    the above.

    Have HijackThis fix the above.

    Have HijackThis fix the above.

    Have HijackThis fix the above.

    The above can become a resource hog. I suggest you
    don't have it running at startup.

    Have HijackThis fix the above.

    Have HijackThis fix the above.

    Have HijackThis fix the above.

    Have HijackThis fix the above.
     
    °Mike°, Jun 23, 2004
    #9
  10. Thanx for your help. The URL is http://members.sexuncensored.com (don't
    ask - my son!)

    I have now found that if I turn off autocomplete for web addresses it doe
    not come up as I type the first letter h
    If I turn autocomplete back on it returns. This address must be being stored
    somewhere?

    I would be very grateful for any further help.
     
    Kimball K Kinnison, Jun 23, 2004
    #10
  11. Kimball K Kinnison

    °Mike° Guest

    On Wed, 23 Jun 2004 19:30:07 +0100, in
    <40d9cc2b$0$8253$>
    Kimball K Kinnison scrawled:


    That suggests that the url is in your Favorites menu.
    Search your favorites (and your 'My Documents') and
    delete any reference to sexuncensored.
     
    °Mike°, Jun 23, 2004
    #11
  12. <snip>

    No luck!

    I have searched MyDocuments and Favourites both by eye and using the search
    tool (making sure it searched for hidden and system files)
    I have also searched the entire hard disk for the url and any file that
    contains the text string of the url.

    I have also searched the registry to no avail as well.

    Any further help would be welcome.
     
    Kimball K Kinnison, Jun 23, 2004
    #12
  13. Kimball K Kinnison

    °Mike° Guest

    It's there. If it comes up when you start to type, it's
    either in the registry history, your Favorites, or on
    your hard drive -- most likely 'My Documents' or
    on the desktop, but not restricted to there. Wherever
    it is, it IS there.

    The built-in Windows find feature is REALLY crap.
    Try Agent Ransack (free)
    http://www.mythicsoft.com/agentransack/default.aspx
     
    °Mike°, Jun 23, 2004
    #13
  14. Mike you are a star!

    Agent Ransack found it in index.dat in Temp Internet Files.
    I googled for a way to delete index.dat and on rebooting the offending URL
    was gone.

    Again many thanx!
     
    Kimball K Kinnison, Jun 23, 2004
    #14
  15. Kimball K Kinnison

    °Mike° Guest

    You're welcome.
     
    °Mike°, Jun 23, 2004
    #15
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.